[GDPR] Attachments in read only?

[Miles]

Due to GDPR, My company would like to have the attachments of one JIRA project to be available in read only and prevent user from replace or add a new attachments. Practically it means removing the download icon.

If you know a plugin that can on top of that remove right clicks I will take it too!

[Nigel Rochford · Accepted solution]

Hi Miles - we have released Zorro Anonymizer recently (Server only just now, but DC following in next 1-2 weeks).

This enables you to encrypt attachments and/or other fields/issue history. 

The current version will let you do this with numerous encryption methods with a secret stored by you outside of Jira. It`s possible to bulk encrypt data in one or more projects, and a future version will support filters/native bulk edit too.

https://marketplace.atlassian.com/apps/1219237/zorro-anonymizer?hosting=server&tab=overview

[Miles]

Interesting!

[Henrique Bittencourt · Accepted solution]

Hello Miles,

Actually, there is no out-of-box feature that allows you to block the attachment download. May exist some ways to achieve that, but there's no perfect method.

If you can see it, your browser has already downloaded it, so is somewhere in the cache or accessible via the image URL. A smart user can find it. All you can do is foul up the R-Click/SaveAs.

You can disable right click with javascript, or pop up a message saying "please don't download content will be updated. This will annoy users who use r-click for other things.

For adding new attachments, you can set a property to the project workflow in all the issue's statuses that you want to block users to add new attachments.

Add the below property:

jira.permission.attach

And the value:

denied

Then publish the changes.

All the users won't be able to add new attachments for issues in those statuses.

Hope this can help!